Effective date: October 27, 2026 · Version: 2026-10-27
Tarca is a place to organize legitimate personal and team work. This policy forms part of the Terms of Service and applies to accounts, content, public intake forms, contact records, external update requests, attachments and other use of the Service.
Use the Service lawfully and respectfully
You may not use Tarca to facilitate unlawful activity, fraud, extortion, threats, harassment, exploitation, impersonation, discrimination prohibited by law, or disclosure of another person's private information without authority. Do not upload or distribute child sexual abuse material, nonconsensual intimate imagery, material that exploits children, or content that infringes another person's intellectual-property or other legal rights.
This policy does not prohibit lawful criticism, negative reviews of Tarca, good-faith complaints, reporting wrongdoing or exercising consumer rights. We do not require users to give favorable reviews or surrender ownership of criticism.
Protect accounts and systems
Do not:
- Access another account, workspace, file or private link without authorization, or misrepresent who you are or the organization you represent.
- Share login credentials as a substitute for separate accounts, bypass paid seats or usage limits, or obtain promotional access through deception or repeated artificial identities.
- Interfere with availability, overload the Service, distribute malicious code, attempt credential stuffing or unauthorized vulnerability testing, or use the Service to attack another system.
- Scrape or harvest personal information, circumvent access controls, or copy substantial parts of the Service through automation without permission.
- Reverse engineer nonpublic portions of the Service except to the extent applicable law gives a right that cannot be restricted, or remove proprietary notices.
If you find a possible vulnerability, stop before accessing other people's information or disrupting the Service and report the minimum details needed through our available contact channel. Publication of this policy is not a bug-bounty offer or advance authorization for testing.
Keep email intentional
External update requests must relate to legitimate work and go to a recipient whom you are authorized to contact. Review the address and sharing preview before sending. Do not use invitations, comments, mentions or external forms for spam, purchased contact lists, unsolicited advertising, phishing, deceptive messages, harassment, bulk outreach or repeated unwanted reminders.
Respect a recipient's request to stop contact. A recipient need not join Tarca to respond to an authorized request. A bearer link may be forwarded; do not describe it as identity verification or use it to collect sensitive proof of identity. Submitting an external response shares it with authorized members of the requesting workspace.
Publish and collect responsibly
Public form operators must accurately identify themselves, provide a relevant privacy notice, and have authority to collect the requested information. Do not impersonate another operator, use deceptive forms, request credentials or prohibited sensitive records, or publish confidential information in questions and instructions. Public addresses and search-engine exclusion requests do not restrict who can open a published form.
A supplied email or phone number is unverified. Do not treat a submission, security challenge, saved contact or response-to-task action as identity verification, workspace membership, a signature, or permission for marketing. Review before using the information and respect correction, deletion and no-contact requests as required by applicable law. Do not evade form quotas, abuse security challenges or flood another person's intake.
Upload only appropriate content
Only submit content you have authority to store, process and share. Do not store passwords, secret keys, bank credentials, payment-card numbers, Social Security numbers, government identity documents, protected health information subject to HIPAA, precise biometric identifiers or similarly sensitive regulated records unless Isbell Group has expressly agreed in writing to support the use and all required safeguards.
Do not upload malware, executable payloads, hidden scripts or files designed to exploit another person. File-type and structure validation is not an antivirus guarantee. Respect the displayed attachment, import, diagram and other operating limits. Do not use the Service as an unrestricted file-hosting, public distribution or backup service.
Respect workplace authority
Invite and assign roles only when authorized. Do not claim to own an employer's or client's content merely because you administer its workspace. Keep personal work separate from shared work when it should remain personal. An account's billing responsibility does not confer permission to inspect every workspace, and workspace membership does not confer the right to spend on another person's behalf.
Reports and enforcement
Report abuse, suspected infringement or a security concern to support@tarca.app, use Legal & contact, or write to Isbell Group, LLC, 7913 Buttonwood Dr., Fort Worth, Texas 76137, United States. Include the relevant record or link identifier, an explanation and a safe way to reach you. Do not include passwords, private-link secrets or unnecessary sensitive evidence.
We may investigate reports and restrict content, external links, sending, features or accounts as reasonably necessary under the Terms. Where appropriate, we will provide notice and an opportunity to resolve a concern. Urgent safety, security or legal issues may require immediate action. We may preserve relevant records and cooperate with lawful requests. We do not promise continuous monitoring or that a report guarantees a particular result.
If you believe action was taken in error, contact us with the relevant account and decision information. Repeated serious violations or repeated substantiated infringement can result in account termination. This ordinary reporting channel is not described as a registered DMCA agent or a promise that every statutory safe-harbor requirement has been satisfied.